$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe5f78-dca1-3fcf-abe3-32a213677d03.roa File: 03fe5f78-dca1-3fcf-abe3-32a213677d03.roa (raw, json) Hash identifier: kYb2JAK2IeNVgp/u54QA9ClzLNDp+rfIRRKJvIJV8tI= Subject key identifier: 5E:72:5C:24:E5:C8:7B:90:F7:E5:76:9A:C1:DD:EF:52:1F:1A:28:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D27AA5768065C15D99FDBDE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe5f78-dca1-3fcf-abe3-32a213677d03.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 34.131.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:57:68:06:5c:15:d9:9f:db:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2b4deacf-b3a3-4377-b607-4bfed8a7447b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:f2:f0:d2:e9:93:57:80:b4:69:57:55:16: cd:2d:52:7d:fc:88:a0:f2:95:91:68:50:6d:b5:73: d3:e1:8f:7e:d6:50:34:78:e4:0c:56:82:2e:a1:15: 53:dc:52:d9:c3:d8:36:06:e2:bf:a6:3c:18:18:53: 5c:3b:2b:55:18:73:17:e8:c1:89:22:66:65:78:44: 54:ed:7e:f4:00:b3:e7:ba:8a:04:76:47:54:ec:4f: fd:3f:33:c0:8b:b7:60:fc:53:17:4e:c0:f0:45:fe: af:e3:c4:f2:e6:57:cb:52:b4:f6:4e:71:7e:09:52: 8e:02:30:20:e3:d9:82:09:6b:25:83:58:a3:63:1e: a4:75:b2:05:73:69:2b:42:b5:41:87:d8:a6:de:fc: fc:11:11:2c:a0:a8:f6:cf:81:a9:45:fa:1d:ad:fe: 0a:b5:1b:11:d9:dd:2d:a2:d2:40:d0:d4:35:83:89: 82:ed:d9:58:d5:df:aa:e7:9c:70:9e:94:c3:7b:83: d8:5e:16:18:de:83:0d:76:03:4f:fa:41:0f:e4:03: 34:91:ca:ed:15:c5:6f:cf:00:55:8d:0f:35:68:fd: 16:58:af:35:9d:14:f4:ae:0c:ba:45:03:52:7a:a7: 6b:a6:09:fd:63:7a:a3:c3:81:4a:e3:21:c3:50:04: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:5C:24:E5:C8:7B:90:F7:E5:76:9A:C1:DD:EF:52:1F:1A:28:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03fe5f78-dca1-3fcf-abe3-32a213677d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:00:85:29:db:49:e3:7a:9d:e7:23:7d:49:e2:98:3a:06:9b: ab:3d:5b:24:f9:a2:59:e7:fa:34:64:04:6e:c5:a7:c1:e6:dd: 56:a3:79:91:96:d2:d9:a3:42:a2:a8:89:97:99:a6:fc:b7:a8: bc:5e:4b:a2:34:01:e9:62:79:4b:ad:ed:0f:69:a8:6e:9f:36: b8:16:b8:33:ad:10:d4:9b:29:55:13:b6:a0:54:9f:f8:36:cd: 93:19:73:24:e0:b2:4b:d0:5b:38:46:45:94:dc:22:00:43:ac: 4e:a1:53:a9:80:d0:cb:b0:b8:92:03:6e:f3:68:ed:1b:e9:d1: a0:31:59:27:cc:2f:7b:ed:0f:9a:d6:2e:17:18:fd:e7:cc:b2: be:f5:32:18:50:ba:b9:fd:07:79:fd:63:cc:d1:bf:d5:58:74: 4c:7e:76:59:92:46:54:b8:6a:0c:e4:03:ff:ce:39:83:d9:5b: 82:f5:29:3c:83:14:99:0d:88:48:af:fc:35:d3:b5:38:a9:b0: 11:0b:46:c0:c9:7e:82:46:8a:78:d9:c6:04:df:7d:83:f3:b4: 2c:92:7f:f7:d1:80:cd:b9:7c:6a:5b:ad:c1:cd:58:db:c6:b2: 2e:69:87:90:5b:e9:0f:9a:5d:2f:48:3f:70:85:5f:44:66:85: cf:18:b0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqldoBlwV2Z/b3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MmI0ZGVhY2YtYjNhMy00Mzc3LWI2MDctNGJmZWQ4YTc0NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zy8NLpk1eAtGlXVRbNLVJ9/Iig8pWRaFBt tXPT4Y9+1lA0eOQMVoIuoRVT3FLZw9g2BuK/pjwYGFNcOytVGHMX6MGJImZleERU 7X70ALPnuooEdkdU7E/9PzPAi7dg/FMXTsDwRf6v48Ty5lfLUrT2TnF+CVKOAjAg 49mCCWslg1ijYx6kdbIFc2krQrVBh9im3vz8EREsoKj2z4GpRfodrf4KtRsR2d0t otJA0NQ1g4mC7dlY1d+q55xwnpTDe4PYXhYY3oMNdgNP+kEP5AM0kcrtFcVvzwBV jQ81aP0WWK81nRT0rgy6RQNSeqdrpgn9Y3qjw4FK4yHDUASmCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5yXCTlyHuQ9+V2msHd71IfGii/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDNmZTVmNzgtZGNhMS0z ZmNmLWFiZTMtMzJhMjEzNjc3ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkAhSnbSeN6necjfUnimDoGm6s9WyT5olnn+jRkBG7Fp8Hm3VajeZGW 0tmjQqKoiZeZpvy3qLxeS6I0AelieUut7Q9pqG6fNrgWuDOtENSbKVUTtqBUn/g2 zZMZcyTgskvQWzhGRZTcIgBDrE6hU6mA0MuwuJIDbvNo7Rvp0aAxWSfML3vtD5rW LhcY/efMsr71MhhQurn9B3n9Y8zRv9VYdEx+dlmSRlS4agzkA//OOYPZW4L1KTyD FJkNiEiv/DXTtTipsBELRsDJfoJGinjZxgTffYPztCySf/fRgM25fGpbrcHNWNvG si5ph5Bb6Q+aXS9IP3CFX0Rmhc8YsK0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:52 2026 by rpki-client